Why is ISO 90003 compliance not added as a QA standard in the Ostendio platform? ISO 90003 compliance QA/ISO 90003 is not a security compliance framework. If you have the controls for ISO 90003, you can import them into the Assessment.